GDAP and Management Groups Access

Copper Contributor

Dear Community, 


 I'm interested in question if GDAP supports access to Azure management groups. Even we're able to assign correct permission to foreign security principal on the root level "\" it's somehow being ignored. Does anyone have the same experience?



1 Reply

Hi @_maondrej 


With GDAP, partners managing Azure are part of a separate security group, which grants owner role-based access control (RBAC) access on all Azure subscriptions for that customer.


You may want to ensure you've followed each required step - Granular delegated admin privileges (GDAP) introduction - Partner Center | Microsoft Learn



It may also be useful to review FAQ - GDAP frequently asked questions - Partner Center | Microsoft Learn



If you are a Microsoft Reseller in CSP, you should work with your Indirect Provider (aka Distributor) who has a direct relationship with Microsoft and can provide you with customer support, pricing, and billing that help to ensure your success.


If this reply answers your question, please Accept as the solution to help the other members find it more quickly. Otherwise, please let me know if you need further assistance on this topic.


Microsoft CSP Licensing Concierge